Lucene search

K
cveGEHCCVE-2024-27107
HistoryMay 14, 2024 - 5:15 p.m.

CVE-2024-27107

2024-05-1417:15:56
CWE-798
GEHC
web.nvd.nist.gov
47
cve-2024-27107
nvd
account security
echopac products
ge healthcare

CVSS3

9.6

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7

Confidence

Low

EPSS

0

Percentile

9.0%

Weak account password in GE HealthCare EchoPAC products

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "EchoPAC Software Only",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "206.82",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ImageVault",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EchoPAC Turnkey",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]

CVSS3

9.6

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7

Confidence

Low

EPSS

0

Percentile

9.0%

Related for CVE-2024-27107